For all of Microsoft's failings, I'd chalk Nimda down as a result of negligent users. Microsoft had a patch out at least a month prior to the outbreak. If you cannot patch your system in that time you have no place in maintaining them in the first place.
Then there is always the issue of Microsoft patches every now and then making the system unusable. However, in the case of this particularly nasty bug I would have thought serious admins would have taken the time to test it on some non-critical servers first.
What is the world coming to? Soon half the webpages out there will have the title 'New Page 1'..
For all of Microsoft's failings, I'd chalk Nimda down as a result of negligent users. Microsoft had a patch out at least a month prior to the outbreak. If you cannot patch your system in that time you have no place in maintaining them in the first place.
Then there is always the issue of Microsoft patches every now and then making the system unusable. However, in the case of this particularly nasty bug I would have thought serious admins would have taken the time to test it on some non-critical servers first.